If the bank didn't get a response, could it drag the phone company into court and get an order disconnecting the user's phone service?
It's hard to imagine that the answer would be yes. Yet federal district court judge James Ware in California had no problem ordering that Google deactivate a user's Gmail account in a similar situation.
Last week, Ware issued the deactivation order at the request of the Rocky Mountain Bank of Wyoming, which had mistakenly emailed some unknown user information about more than 1,000 customers. When the bank realized its error, it sent a follow-up email asking the user to contact it, but never got a response.
On Monday -- five full days after mandating deactivation -- Ware vacated his order at the joint request of Google and the bank, allowing Google to restore the user's access to the account.
The bank now says the misdirected email was deleted unopened. "Rocky Mountain Bank, working closely with Google (through court order), confirmed on Thursday of last week that the email containing client information was never opened and has now been permanently destroyed by Google's system," bank director Jennifer Mayfield said in an email to MediaPost.
It's still not clear whether the user saw the email and made a decision to delete it unread, or if the user never noticed the email and it was erased automatically (as would happen if it went to a spam filter). Mayfield also says that the bank has implemented new security procedures aimed at preventing this kind of data breach in the future.
But that's not to say that another bank won't make a similar mistake in the future, or that another judge won't issue similar deactivation orders in the future.
In fact, until the courts realize that the Web is every bit as critical to sharing information as TV, the telephone and snail mail, it seems all but inevitable that another judge will cut off some hapless user's access to data in the cloud. And that should spook everyone who stores information in an email account, or a blog, or through any other Web-based service.